clones/friendica
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Escaping moved to template 

https://github.com/friendica/friendica/pull/6147#pullrequestreview-176051481
This commit is contained in:
Alexandre Alapetite 2018-11-17 14:01:07 +01:00
parent e45d32d5a5
commit 4d092872a5
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/App.php
View File

@ -116,7 +116,7 @@ class App
public function registerStylesheet($path) public function registerStylesheet($path)
{ {
$url = str_replace($this->getBasePath() . DIRECTORY_SEPARATOR, '', $path); $url = str_replace($this->getBasePath() . DIRECTORY_SEPARATOR, '', $path);
$url = htmlspecialchars($url, ENT_COMPAT, 'UTF-8');
$this->stylesheets[] = trim($url, '/'); $this->stylesheets[] = trim($url, '/');
} }

2
view/templates/head.tpl
View File

@ -9,7 +9,7 @@
<link rel="stylesheet" href="view/asset/perfect-scrollbar/css/perfect-scrollbar.min.css" type="text/css" media="screen" /> <link rel="stylesheet" href="view/asset/perfect-scrollbar/css/perfect-scrollbar.min.css" type="text/css" media="screen" />
{{foreach $stylesheets as $stylesheetUrl}} {{foreach $stylesheets as $stylesheetUrl}}
<link rel="stylesheet" href="{{$stylesheetUrl}}" type="text/css" media="screen" /> <link rel="stylesheet" href="{{$stylesheetUrl|escape:"html":"UTF-8"}}" type="text/css" media="screen" />
{{/foreach}} {{/foreach}}
<link rel="shortcut icon" href="{{$shortcut_icon}}" /> <link rel="shortcut icon" href="{{$shortcut_icon}}" />

2
view/theme/frio/templates/head.tpl
View File

@ -26,7 +26,7 @@
<link rel="stylesheet" href="view/theme/frio/font/open_sans/open-sans.css" type="text/css" media="screen"/> <link rel="stylesheet" href="view/theme/frio/font/open_sans/open-sans.css" type="text/css" media="screen"/>
{{foreach $stylesheets as $stylesheetUrl}} {{foreach $stylesheets as $stylesheetUrl}}
<link rel="stylesheet" href="{{$stylesheetUrl}}" type="text/css" media="screen" /> <link rel="stylesheet" href="{{$stylesheetUrl|escape:"html":"UTF-8"}}" type="text/css" media="screen" />
{{/foreach}} {{/foreach}}
{{* own css files *}} {{* own css files *}}